Category Archives: Web Security

Could the AP Twitter hack have been prevented?

Posted on April 26, 2013 by

Twitter hacks can cause a lot of damage. It is news of this week that the Associated Press Twitter account got compromised, and sent a tweet announcing that the White House had been hit by a terrorist attack, and that … Continue reading →

Posted in Web Security | Tagged | Leave a comment

Clickonomics: Determining the Effect of Anti-Piracy Measures for One-Click Hosting

Posted on February 27, 2013 by

The Digital Millennium Copyright Act (DCMA) already allows copyright owners to have infringing files taken down from hosting services and search engines. The Stop Online Privacy Act (SOPA) law proposal would have introduced a similar take-down scheme directed against entire … Continue reading →

Posted in Web Security | Leave a comment

Paying for Piracy? An Analysis of One-Click Hosters’ Controversial Reward Schemes

Posted on December 13, 2012 by

Many Internet users have probably heard of Megaupload, not least because the site was shut down by the FBI in early 2012. Megaupload was one of the first and largest one-click hosters (or “cyberlockers”). While Megaupload may be offline at … Continue reading →

Posted in Web Security | Leave a comment

A Security Analysis of Two Satphone Standards

Posted on October 15, 2012 by

There is a rich body of work related to the security aspects of cellular mobile phones, in particular with respect to the GSM and UMTS systems. Similarly to GSM, there exist two standards for satellite telephony called GMR-1 and GMR2. These two standards … Continue reading →

Posted in Web Security | Leave a comment

Shellzer: a tool for the dynamic analysis of malicious shellcode

Posted on January 10, 2012 by

Last September, I presented Shellzer at RAID 2011 conference. Shellzer is a tool that I developed back in August 2010, that aims to dynamically analyze malicious shellcode. The main goal was to analyze the shellcode samples that have been collected by running … Continue reading →

Posted in Binary Analysis, Web Security | Leave a comment

Insights into User Behavior in Dealing with Internet Attacks

Posted on November 22, 2011 by

At last, we finalized analyzing the data from the user experiments we had conducted earlier this year, and collected the results in the paper “Insights into User Behavior in Dealing with Internet Attacks”, that is going to appear at NDSS, … Continue reading →

Posted in Web Security | Leave a comment

Report from Amsterdam (OWASP & DIMVA)

Posted on July 12, 2011 by

Last week I was in Amsterdam for an intensive three days of conferencing, talks and social events. On the first evening, I was kindly invited to join the OWASP Netherlands Chapter Meeting to present the work we recently did together with … Continue reading →

Posted in Web Security | Leave a comment

Short report: IEEE Symposium on Security and Privacy 2011 (aka. Oakland)

Posted on May 27, 2011 by

Earlier this week, the 32nd annual IEEE Symposium on Security and Privacy was held in Oakland, CA. This year the UCSB delegation consisted of three faculty members and 16 students. The reception on Sunday evening brought along interesting encounters for … Continue reading →

Posted in Web Security | Leave a comment

The (in)security of File Hosting Services

Posted on March 14, 2011 by

In this post we will give a summary of our paper titled Exposing the Lack of Privacy in File Hosting Services that we are going to present in the 4th workshop of Large-scale Exploitation and Emergent threats (LEET ’11) in … Continue reading →

Posted in Web Security | Leave a comment

Short update on Financial Cryptography and Data Security 2011

Posted on March 9, 2011 by

Yesterday, I returned from the Financial Crypto conference. This year, FC was organized on the beautiful island of Saint Lucia. The small Caribbean island covers 620 km2 of land and it has an estimated population of 173.765 people. Two mountains, … Continue reading →

Posted in Conferences, Web Security | Leave a comment